Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
File:                     zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft (raw, json)
Hash identifier:          wkTXFo2UNAEy3uS6uqV8W4lpl1HbNc2Wwqs22HprFPc=
Subject key identifier:   3E:C6:28:3B:83:73:8D:00:99:4E:B3:D0:7F:61:89:B5:41:73:55:22
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
Manifest number:          126F
Signing time:             Wed 15 May 2024 01:32:05 +0000
Manifest this update:     Wed 15 May 2024 01:32:05 +0000
Manifest next update:     Sat 25 May 2024 01:32:05 +0000
Files and hashes:         1: 033QGFhR_iIueh1oRe-bU2RZkZc.roa (hash: F3EXiYCgfy94RaPWkzgSbQzmTmJ3Ti3yOONgxE9HuiE=)
                          2: 26PByFPUeQ6MHUFybjn0KwtrKiM.roa (hash: HUCNPps9SMMiU4IbMdBVxbR3hEswK2e4qSu4lTSOk4k=)
                          3: 6SL6pXBTm37tuLsX2i63H0l7XmU.roa (hash: FiFipCfNBUQ7Gb6lNoud59r7879acgavKr7f5LVnYxk=)
                          4: ALckuVhuCKNwpecmomxfYHMMKCQ.roa (hash: SDslNmmu+BBYhm2S4C0DfQ8ydM+eA8fkljcvVt0pSxM=)
                          5: PM8OLIv-ndKuBOaMsl8GEslpznQ.roa (hash: vHvjelJz3OoBPyNK28FRBHJaJLv9iQryltLJNqpJ2PA=)
                          6: VMa-p6Dq2BBPKJQ4wlU0wDR-oP4.roa (hash: 4UkA72fjmJ8JPMFaDVD1O7LtdgfY9SJu10+DPgu/YuI=)
                          7: VZlKqAq8tRWiHF1_NwrLtkg0YSs.roa (hash: kq8IDyQwTbXCzMUinMTYAISPD7fdV3ias5xChSRE1MM=)
                          8: bSfZODLnUvhTm5WyWXtgugSWyxI.roa (hash: uR+AvSHJmW/XutCXKt4B3SklIlNOPupsI+dFUE3Wn5s=)
                          9: hyO-RjQqDsuSxNWYC348_4AxArc.roa (hash: AMZt8Dr9WQxeaAsZKnot8jGOJKNfCi3o4xusvADAyzo=)
                          10: jW20tVNKnvuh_jgHtmHCfhFYt9U.roa (hash: GVzdIhN/zBEDnm4QbcnYIIPqxFlnbapgmhokd32fUrk=)
                          11: k4m_BR2xgOkh2vm_QDBFrBTu2sE.roa (hash: PEGRtg6kAFmJ2u+KG4uwz9rt3bTS4G4CA9idpR3SQ5w=)
                          12: k_3HNC1xHP4bcnLCEl_xB4b9_9c.roa (hash: Qfvdsow0ZKsZWAOCC3MJnpjE9nUKRLSiBWnFegEc4Rs=)
                          13: log_GVUE0bM_vzX54Dcw6Vepczk.roa (hash: CGxtLQYixitncYJabyenXNsjOjTRCeUHtLOioafW1c8=)
                          14: uOxO339EFUV2bsKzQ3ePFrIiQ3Q.roa (hash: QiILjhpqxD3FKkaM6e2wQ501EISZV9a7uRs0MfWHT2o=)
                          15: zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl (hash: dIi/MrCnsOTFMOM7YMZwLZ3dgIdxqlheiH4wuPAsBIc=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 07:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: May 15 01:32:05 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=3EC6283B83738D00994EB3D07F6189B541735522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:25:50:92:66:6d:f6:f4:a6:de:a1:f7:77:d0:
                    33:45:20:47:cb:32:20:be:90:1a:41:34:f4:d0:28:
                    a8:44:73:5b:3f:ee:35:dc:ad:b8:6b:39:91:d0:a4:
                    77:4b:a0:ee:0c:36:e3:89:94:9d:e8:7a:f3:51:cf:
                    2d:26:3c:04:43:b7:27:e1:58:75:d4:7d:7f:be:38:
                    80:53:ce:aa:aa:1a:bf:13:4b:f1:d7:61:65:56:82:
                    34:25:b6:75:80:e3:bf:c4:69:da:d7:3f:d8:24:9d:
                    32:cc:cf:95:8a:5d:03:ff:13:6b:2e:8c:d2:6c:0c:
                    83:a7:b9:88:3a:31:3f:b5:4c:0e:2a:87:38:54:a0:
                    26:a2:97:3c:b0:37:5d:8b:70:5c:32:3a:cf:f5:67:
                    21:a5:92:da:0c:a2:50:58:ca:cd:4d:13:6c:56:e6:
                    86:2e:03:77:8e:5e:4d:e7:bf:50:59:34:57:eb:97:
                    f7:1d:a2:e0:ee:64:16:09:e0:cf:4a:31:45:57:73:
                    62:d4:a6:c3:d9:f2:d9:1c:94:67:04:42:47:a9:71:
                    51:16:fd:93:f9:15:c4:8d:21:19:bc:f5:a6:8f:8d:
                    15:d9:19:92:43:a1:74:b5:ac:8f:70:3e:40:70:0b:
                    d9:65:14:27:ca:15:71:a3:01:8d:3b:e3:a4:47:c4:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C6:28:3B:83:73:8D:00:99:4E:B3:D0:7F:61:89:B5:41:73:55:22
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:99:3d:03:88:64:8d:e9:38:01:6a:ec:59:8c:49:58:0a:bc:
         df:70:23:06:c3:b7:ac:5e:87:7e:f0:2d:d5:5f:ee:5d:77:c4:
         4b:75:0f:25:03:18:c2:31:8f:04:d2:b4:e9:48:8b:57:72:e6:
         18:56:7b:de:68:01:df:86:85:7b:50:a7:66:8b:45:b6:4d:aa:
         75:99:7b:7b:fb:52:41:c0:ac:1d:55:9c:98:85:0d:7c:60:e5:
         97:92:bd:e7:c2:5d:f8:01:54:c3:b8:ca:7d:64:7d:f0:2f:00:
         c8:b7:73:c9:30:a4:45:94:e2:2f:3f:d2:58:aa:81:01:d7:cf:
         53:d8:55:26:bd:ce:55:ba:f4:9e:93:f1:7d:57:71:ec:24:22:
         a2:cd:ec:a1:c3:c9:a3:36:03:41:bc:60:6d:be:f5:8c:35:0d:
         d1:1f:83:ac:51:aa:b7:fe:9c:37:bf:cd:14:78:c3:57:60:0d:
         bf:f8:73:92:e6:5c:f9:10:ee:0f:fe:4e:cd:03:50:21:96:ad:
         ec:ca:02:59:83:13:ae:24:72:5f:46:be:e7:fd:ce:ae:fb:7f:
         fa:f6:d2:b1:1b:29:ae:5d:b5:ce:5a:66:d0:1f:e2:a6:d2:70:
         be:c7:3a:05:e2:7f:7b:b6:db:fd:af:61:fc:13:0d:24:48:ad:
         cc:50:a6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:12:42 2024 by rpki-client on console-fra.rpki-client.org